115 lines
4.6 KiB
YAML
115 lines
4.6 KiB
YAML
name: generate-chart
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "*"
|
|
|
|
jobs:
|
|
generate-chart-publish:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Install packages via apt
|
|
run: |
|
|
apt update --yes
|
|
apt install --yes curl ca-certificates curl gnupg jq
|
|
|
|
- name: Install helm
|
|
env:
|
|
# renovate: datasource=docker depName=alpine/helm
|
|
HELM_VERSION: "3.19.0"
|
|
run: |
|
|
curl --fail --location --output /dev/stdout --silent --show-error https://get.helm.sh/helm-v${HELM_VERSION}-linux-$(dpkg --print-architecture).tar.gz | tar --extract --gzip --file /dev/stdin
|
|
mv linux-$(dpkg --print-architecture)/helm /usr/local/bin/
|
|
rm --force --recursive linux-$(dpkg --print-architecture) helm-v${HELM_VERSION}-linux-$(dpkg --print-architecture).tar.gz
|
|
helm version
|
|
|
|
- name: Install yq
|
|
env:
|
|
YQ_VERSION: v4.45.4 # renovate: datasource=github-releases depName=mikefarah/yq
|
|
run: |
|
|
curl --fail --location --output /dev/stdout --silent --show-error https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_$(dpkg --print-architecture).tar.gz | tar --extract --gzip --file /dev/stdin
|
|
mv yq_linux_$(dpkg --print-architecture) /usr/local/bin
|
|
rm --force --recursive yq_linux_$(dpkg --print-architecture) yq_linux_$(dpkg --print-architecture).tar.gz
|
|
yq --version
|
|
|
|
- name: Install docker-ce via apt
|
|
run: |
|
|
install -m 0755 -d /etc/apt/keyrings
|
|
curl --fail --location --silent --show-error https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
|
chmod a+r /etc/apt/keyrings/docker.gpg
|
|
echo "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
|
|
apt update --yes
|
|
apt install --yes python3 python3-pip apt-transport-https docker-ce-cli
|
|
|
|
- name: Import GPG key
|
|
id: import_gpg
|
|
uses: https://github.com/crazy-max/ghaction-import-gpg@v6
|
|
with:
|
|
gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
|
|
passphrase: ${{ secrets.GPGSIGN_PASSPHRASE }}
|
|
fingerprint: CCCDAD206FCE593128D2C7A22781E520334944DD
|
|
|
|
- name: Add Artifacthub.io annotations
|
|
run: |
|
|
NEW_TAG="$(git tag --sort=-version:refname | head --lines 1)"
|
|
OLD_TAG="$(git tag --sort=-version:refname | head --lines 2 | tail --lines 1)"
|
|
.gitea/scripts/add-annotations.sh "${OLD_TAG}" "${NEW_TAG}"
|
|
|
|
- name: Print Chart.yaml
|
|
run: cat Chart.yaml
|
|
|
|
# Using helm gpg plugin as 'helm package --sign' has issues with gpg2: https://github.com/helm/helm/issues/2843
|
|
- name: package chart
|
|
run: |
|
|
# FIXME: use upstream after https://github.com/technosophos/helm-gpg/issues/1 is solved
|
|
helm plugin install https://github.com/pat-s/helm-gpg
|
|
helm dependency build
|
|
helm package --version "${GITHUB_REF#refs/tags/v}" ./
|
|
mkdir gitea
|
|
mv gitea*.tgz gitea/
|
|
curl --fail --location --output gitea/index.yaml --silent --show-error https://dl.gitea.com/charts/index.yaml
|
|
helm repo index gitea/ --url https://dl.gitea.com/charts --merge gitea/index.yaml
|
|
|
|
- name: aws credential configure
|
|
uses: https://github.com/s3-actions/s3cmd@v2.0.1
|
|
with:
|
|
provider: aws
|
|
region: 'us-east-1'
|
|
access_key: ${{ secrets.S3_ACCESS_KEY }}
|
|
secret_key: ${{ secrets.S3_SECRET_KEY }}
|
|
|
|
- name: Copy files to S3 and clear cache
|
|
run: |
|
|
s3cmd sync --host weyma-s3.infra.dubyatp.xyz --recursive --acl-public gitea/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
|
|
|
|
release-gitea:
|
|
needs: generate-chart-publish
|
|
runs-on: ubuntu-latest
|
|
container: docker.io/thegeeklab/git-sv:2.0.9
|
|
steps:
|
|
- name: install tools
|
|
run: |
|
|
apk add -q --update --no-cache nodejs
|
|
- uses: actions/checkout@v6
|
|
with:
|
|
fetch-tags: true
|
|
fetch-depth: 0
|
|
|
|
- name: Create changelog
|
|
run: |
|
|
git sv current-version
|
|
git sv release-notes -t ${GITHUB_REF#refs/tags/} -o CHANGELOG.md
|
|
sed -i '1,2d' CHANGELOG.md # remove version
|
|
cat CHANGELOG.md
|
|
|
|
- name: Release
|
|
uses: https://github.com/akkuman/gitea-release-action@v1
|
|
with:
|
|
body_path: CHANGELOG.md
|
|
token: "${{ secrets.RELEASE_TOKEN }}"
|